TechOps Examples
Hey — It's Govardhana MK 👋
Welcome to another technical edition.
Every Tuesday – You’ll receive a free edition with a byte-size use case, remote job opportunities, top news, tools, and articles.
Every Thursday and Saturday – You’ll receive a special edition with a deep dive use case, remote job opportunities and articles.
Top engineers at Anthropic and OpenAI say AI now writes 100% of their code.
If you're not using AI, you're spending 40 hours doing what they do in 4.
These 100+ Claude Code hacks fix that and help you ship 10x faster.
Sign up for The Code and get:
100+ Claude Code hacks used by top engineers — free
The Code newsletter — learn the latest AI tools, tips, and skills to code faster with AI in 5 minutes a day
🛠 TOOL OF THE DAY
nuclei - Fast and customizable vulnerability scanner based on simple YAML based DSL.
🧠 USE CASE
How GuardDuty Protects S3 from Malware
Some of you may know, AWS launched Amazon GuardDuty Malware Protection for S3 on 11 Jun 24, and I've noticed increased interest from organizations exploring this option.
And this is how it typically flows:
GuardDuty continuously monitors S3 objects using advanced threat detection.
When malware is detected, GuardDuty tags the files to make them visible for further investigation.
The malware is automatically quarantined to prevent further spread.
EventBridge monitors these malware events.
Upon detection, EventBridge triggers Lambda for automation tasks.
Lambda automates actions like moving infected files to a quarantine bucket, logging the incidents for tracking, and notifying teams for prompt response.
While enabling malware protection in GuardDuty for your S3 buckets:
You can scan all objects in the S3 bucket or
Filter out with a specific prefix.
Make sure the permissions that are required by GuardDuty to scan the buckets are Configured in the IAM role policy.
Find IAM role policy instructions here.
Key Pointers You Should Know:
You can enable Malware Protection for S3 in your account's S3 bucket, but not for member accounts as a delegated admin.
This feature is only available for S3 buckets in the same Region selected in the GuardDuty console; cross-Region buckets aren't supported.
Receive EventBridge notifications for plan status changes in member accounts' buckets.
Detects malicious file uploads in selected S3 buckets.
If GuardDuty is not enabled, you can still enable only Malware Protection for S3.
Scanned objects are tagged with GuardDutyMalwareScanStatus with these values:
NO_THREATS_FOUND | No threats detected |
THREATS_FOUND | Potential threats detected |
UNSUPPORTED | Scanning not supported |
ACCESS_DENIED | Object access restricted |
FAILED | Scanning unsuccessful |
For further exploration:
Hope you find this use case helpful in your learning journey !
Looking to promote your company, product, service, or event to 50,000+ Cloud Native Professionals? Let's work together.
